MAL-2025-48149 Malicious code in redirect-cx4vm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 885599176b7288b83170a3823028daf5aed3b54943a633f89ceb9e172fa0899a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48235 Malicious code in redirect-ystrj5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb686c3124e1851b3eeb9b2c48defe89d5978368b71fe5e0855576605ce632da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48180 Malicious code in redirect-ksm5w7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2feba355270c24294faf83abadea29520bbb37968b5b7aed42d3c717a22846d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-8f3x70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cc50fb739d4328a1ee9c3f1a2b4fe031b53f6a6915b239eb09539463c58858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48139 Malicious code in redirect-a1jnfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 144cd40316e9b75e61f4a806b5a17a3ad66d2668b1fe532dc5758a405b4cdf5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-t8kcsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d48bdc09f7a339317e5e1351a51269a2f92801fc1e6c5fa906b2bfafbb23925f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-ld0k2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f762105594d45064c5f4884413c3276f3290f34020261668e50bae1efafcff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Whether you’re shaping strategy or working on the front lines, Microsoft Ignite offers direct access to the latest advancements and practica...

Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Whether you’re shaping strategy or working on the front lines, Microsoft Ignite offers direct access to the latest advancements and practica...

CVE-2025-32919

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: from 2.4.0 before 2.4.0p13, from 2.3.0 before 2.3.0p38, from 2.2.0 before 2.2.0p46, and all versions of 2.1.0 EOL...

CVE-2025-39664

Insufficient escaping in the report scheduler within Checkmk 2.4.0p13, 2.3.0p38, 2.2.0p46 and 2.1.0 EOL allows authenticated attackers to define the storage location of report file pairs beyond their intended root directory...

CVE-2025-61771 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, ruby3.2-rack, ruby3.4-rack, ruby3.3-rack, gitlab-cng...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS Advisories on October 9, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-282-01 Hitachi Energy Asset Suite ICSA-25-282-02 Rockwell Automation Lifecycle Service...

CVE-2025-10217

creationtimestamp| type| source ---|---|--- 2025-10-09 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-282-01...

Rockwell Automation Lifecycle Services with Cisco

RISK EVALUATION Successful exploitation of this vulnerability could result in arbitrary code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control system...

Malicious code in @testcarrot/supply3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbc24cc97adb2847161caf543bbb337374513e26dd4d6d2c83b6d306df7f45d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48103 Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48094 Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Weaponized AI Assistants & Credential Thieves

Learn the state of AI and the NPM ecosystem with the recent s1ngularity' weaponized AI for credential theft...

AI-Driven Post-Quantum Cryptography for Cyber-Resilient V2X Communication in Transportation Cyber-Physical Systems

Transportation Cyber-Physical Systems TCPS integrate physical elements, such as transportation infrastructure and vehicles, with cyber elements via advanced communication technologies, allowing them to interact seamlessly. This integration enhances the efficiency, safety, and sustainability of...